Конфигурация для внешнего Traefik
This commit is contained in:
@@ -7,41 +7,16 @@ services:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
args:
|
||||
NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-https://global-it24.local}
|
||||
NEXT_PUBLIC_SITE_URL: ${NEXT_PUBLIC_SITE_URL:-https://video.mscsrv.ru}
|
||||
container_name: global-it24-landing
|
||||
restart: unless-stopped
|
||||
ports:
|
||||
- "3000:3000"
|
||||
environment:
|
||||
- NODE_ENV=production
|
||||
- NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-https://global-it24.local}
|
||||
networks:
|
||||
- traefik-public
|
||||
labels:
|
||||
# Включаем Traefik для этого контейнера
|
||||
- "traefik.enable=true"
|
||||
|
||||
# Настройка HTTP
|
||||
- "traefik.http.routers.global-it24.rule=Host(`${DOMAIN:-global-it24.local}`)"
|
||||
- "traefik.http.routers.global-it24.entrypoints=web"
|
||||
- "traefik.http.routers.global-it24.middlewares=redirect-to-https@docker"
|
||||
|
||||
# Настройка HTTPS
|
||||
- "traefik.http.routers.global-it24-secure.rule=Host(`${DOMAIN:-global-it24.local}`)"
|
||||
- "traefik.http.routers.global-it24-secure.entrypoints=websecure"
|
||||
- "traefik.http.routers.global-it24-secure.tls=true"
|
||||
- "traefik.http.routers.global-it24-secure.tls.certresolver=letsencrypt"
|
||||
|
||||
# Middleware для редиректа HTTP -> HTTPS
|
||||
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
|
||||
- "traefik.http.middlewares.redirect-to-https.redirectscheme.permanent=true"
|
||||
|
||||
# Указываем порт сервиса
|
||||
- "traefik.http.services.global-it24.loadbalancer.server.port=3000"
|
||||
|
||||
# Middleware для заголовков безопасности
|
||||
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-Frame-Options=SAMEORIGIN"
|
||||
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-Content-Type-Options=nosniff"
|
||||
- "traefik.http.middlewares.security-headers.headers.customResponseHeaders.X-XSS-Protection=1; mode=block"
|
||||
- "traefik.http.routers.global-it24-secure.middlewares=security-headers@docker"
|
||||
- NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-https://video.mscsrv.ru}
|
||||
- PORT=3000
|
||||
- HOSTNAME=0.0.0.0
|
||||
healthcheck:
|
||||
test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/"]
|
||||
interval: 30s
|
||||
@@ -49,6 +24,5 @@ services:
|
||||
retries: 3
|
||||
start_period: 40s
|
||||
|
||||
networks:
|
||||
traefik-public:
|
||||
external: true
|
||||
# Для работы с внешним Traefik не требуется сеть
|
||||
# Traefik будет обращаться к контейнеру по IP хоста на порту 3000
|
||||
|
||||
Reference in New Issue
Block a user